Added configuration to set challenge in UnauthorizedHttpException, thrown in the AccessDeniedListener